UBUNTU-CVE-2026-64297

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...

UBUNTU-CVE-2026-64350

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnspallocstreaminfo cdnspallocstreaminfo allocates streaminfo-streamctxarray with cdnspallocstreamctx. If a later stream ring allocation or stream mapping update fails, the error path...

UBUNTU-CVE-2026-64482

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

CVE-2026-64507

CVE-2026-64507 : In the Linux kernel, a hardening tied to Spectre-v2 mitigations enables an IBPB flush during BPF JIT allocation/memory reuse when BPF-JIT is in use. The change guards the IBPB enabling under CONFIG_BPF_JIT, and skips enabling if the BPF dispatcher already uses a retpoline sequenc...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

CVE-2026-64498 iio: buffer: hw-consumer: free scan_mask on buffer release

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in commit 9a2e1233d38c "iio: buffer: hw-consumer: remove redundant scanmask flexible array". Before that change, the scan mask storage was...

EUVD-2026-48833

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64489 ALSA: ymfpci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64489

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64489 ALSA: ymfpci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

CVE-2026-64489

Summary (technical): CVE-2026-64489 affects the Linux kernel, specifically the ALSA ymfpci component. The vulnerability arises because snd_ctl_new1() can return NULL on memory allocation failure, and the subsequent code path in snd_ymfpci_create_spdif_controls() dereferences kctl->id.device wi...

CVE-2026-64488 ALSA: aoa: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...

EUVD-2026-48832

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. In layout.c, the function does not check the return value before dereferencing ctl-id.name or passing to aoasndctladd, which can le...

CVE-2026-64488

CVE-2026-64488 concerns the Linux kernel ALSA aoa subsystem. According to multiple sources, the issue arises when snd_ctl_new1() can return NULL on allocation failure, and code in layout.c dereferences ctl->id.name or passes the value without verifying the NULL return. The result is a NULL poi...

CVE-2026-64486 ALSA: cmipci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...

CVE-2026-64486

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...

CVE-2026-64486

CVE-2026-64486 affects the Linux kernel (ALSA: cmipci). The bug occurs when snd_ctl_new1() memory allocation fails and returns NULL, after which snd_cmipci_spdif_controls() dereferences kctl->id.device, causing a NULL pointer dereference. Mitigation from the sources: add NULL checks after snd_...

CVE-2026-64486 ALSA: cmipci: check snd_ctl_new1() return value

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...

EUVD-2026-48830

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL pointer...